Design/Logic Flaw

Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request...

CVE-2019-7719

Nibbleblog 4.0.5 allows eval injection by placing PHP code in the install.php username parameter and then making a content/private/shadow.php request...

PT-2019-18721

Name of the Vulnerable Software and Affected Versions Nibbleblog version 4.0.5 Description The issue allows for eval injection by placing PHP code in the username parameter of the install.php file, and then making a request to the "content/private/shadow.php" endpoint. Recommendations For...